CVE-2015-5289: Buffer Overflow
Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not properly handled in (1) json or (2) jsonb values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5289?
CVE-2015-5289 is classified as a high severity vulnerability due to its ability to cause a denial of service by crashing the server.
How do I fix CVE-2015-5289?
To fix CVE-2015-5289, upgrade PostgreSQL to version 9.3.10 or later for the 9.3.x series or version 9.4.5 or later for the 9.4.x series.
What are the implications of exploiting CVE-2015-5289?
Exploiting CVE-2015-5289 allows attackers to trigger stack-based buffer overflows leading to server crashes, resulting in service disruption.
Which PostgreSQL versions are affected by CVE-2015-5289?
CVE-2015-5289 affects PostgreSQL versions prior to 9.3.10 and 9.4.5.
Is CVE-2015-5289 related to JSON parsing?
Yes, CVE-2015-5289 involves multiple stack-based buffer overflows specifically in the JSON parsing functionality of PostgreSQL.